Muhammad Saim

Cybersecurity Analyst

Fiverr • Freelance

Sep 2022 - Present • 4 yrs 2 mos

As a Freelance Cybersecurity Analyst, I help businesses, startups, and individuals identify, assess, and remediate security vulnerabilities in web applications, networks, and Linux systems. I perform penetration testing, vulnerability assessments, security audits, and configuration reviews to improve overall security and reduce potential risks. My work follows OWASP Top 10 and NIST best practices, ensuring every assessment is ethical, accurate, and professionally documented. I have hands-on experience using industry-standard tools such as Burp Suite, Nmap, Nessus, Wireshark, Metasploit, OWASP ZAP, SQLmap, Gobuster, Nikto, Hydra, Kali Linux, and Snort IDS/IPS. I conduct both manual and automated security testing to identify vulnerabilities including SQL Injection (SQLi), Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), security misconfigurations, authentication weaknesses, and other common web application and network security issues. In addition to security testing, I perform Linux system hardening, configure firewalls using UFW and iptables, automate security tasks with Bash scripting, and assist clients in implementing practical security improvements. Every project includes a detailed report outlining identified vulnerabilities, risk levels, proof of findings, and actionable remediation recommendations. My goal is to provide reliable, confidential, and high-quality cybersecurity services while helping clients strengthen their security posture through clear communication, timely delivery, and professional support.

Cyber security Analyst

Developers Hub • Fulltime

Mar 2026 - May 2026 • 2 mos

As a Cybersecurity Intern, I contributed to real-world offensive and defensive security projects with a focus on web application testing, Linux system hardening, and network protection. Key Responsibilities & Achievements: 1. Developed and secured a deliberately vulnerable web application to demonstrate common exploits, including SQL Injection and XSS. 2. Performed manual and automated vulnerability assessments; implemented and validated effective security patches. 3. Automated security tasks, including log analysis, system audits, and vulnerability scans, using Bash shell scripting. 4. Deployed and configured Web Application Firewalls (WAFs) to mitigate OWASP Top 10 threats. 5. Applied Linux hardening techniques, including managing user privileges, securing configurations, and disabling unsafe services. 6. Configured firewalls using iptables and UFW to control network traffic and minimize the attack surface. 7. Installed and tested Snort as an IDS/IPS for real-time intrusion detection and alerting. 8. Delivered weekly technical reports and a detailed first-month video assessment documenting tools, findings, and mitigations.

Cybersecurity Analyst

Trilogix Cloud • Fulltime

Nov 2025 - Dec 2025 • 1 mo

As a Cybersecurity Intern at Trilogix Cloud, I contributed to securing cloud-based and web applications by performing vulnerability assessments, implementing security controls, and strengthening Linux and network security through hands-on projects. Key Responsibilities & Achievements: * Performed web application security assessments to identify and remediate vulnerabilities, including SQL Injection (SQLi), Cross-Site Scripting (XSS), and other OWASP Top 10 risks. * Conducted manual and automated vulnerability scanning, validated remediation efforts, and documented security findings. * Automated security tasks such as log analysis, system auditing, and vulnerability checks using Bash shell scripting. * Configured and managed Web Application Firewalls (WAFs) to enhance application security against common web-based attacks. * Applied Linux system hardening techniques by securing user accounts, managing file permissions, disabling unnecessary services, and improving system configurations. * Configured and maintained firewall rules using UFW and iptables to strengthen network security and reduce the attack surface. * Installed, configured, and tested Snort IDS/IPS for real-time intrusion detection, network monitoring, and threat alerting. * Prepared technical reports, security documentation, and remediation recommendations while collaborating with the technical team on security improvements.